CVE-2023-37624

Published Jul 26, 2023

Last updated a year ago

CVSS medium 6.1

Overview

Description: Netdisco before v2.063000 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links.
Source: cve@mitre.org
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 6.1
Impact score: 2.7
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Severity: MEDIUM

Weaknesses

nvd@nist.gov: CWE-601

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:netdisco:netdisco:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "49A130E0-9B38-4DA0-82CD-4B2B3376A38F",
            "versionEndExcluding": "2.063000"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References